Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/GRsQ61BmCNwjrJofpsOtJUOXzGI.roa
File: GRsQ61BmCNwjrJofpsOtJUOXzGI.roa (raw, json)
Hash identifier: iYTLmi2Kj5VABWBW9HQww1E8TzOGOHlAjI91ErMxRgc=
Subject key identifier: 19:1B:10:EB:50:66:08:DC:23:AC:9A:1F:A6:C3:AD:25:43:97:CC:62
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 28160A5A
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/GRsQ61BmCNwjrJofpsOtJUOXzGI.roa
Signing time: Sat 01 Jan 2022 16:09:35 +0000
ROA not before: Sat 01 Jan 2022 16:09:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62443
IP address blocks: 95.47.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 672533082 (0x28160a5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:09:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=191b10eb506608dc23ac9a1fa6c3ad254397cc62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a4:e6:45:fc:e0:37:b1:bc:13:14:55:6e:ed:
03:c7:dd:cf:7e:41:43:dc:e9:65:06:42:9a:d9:95:
31:e3:07:58:5f:f2:af:09:eb:ec:14:d4:3b:a6:31:
fc:b5:6e:62:55:5c:e5:80:ae:56:dd:89:28:07:59:
7f:da:7c:a6:cc:dc:e7:59:a8:7a:a8:72:67:3a:83:
01:e7:04:da:f3:8f:b2:7f:d8:78:7f:35:dc:82:25:
50:db:79:7a:69:6b:58:f3:f0:05:ab:99:8f:8a:0d:
9a:a7:20:a5:a6:bd:78:99:5b:ca:f6:c6:94:37:d3:
3f:13:84:54:01:a7:be:22:aa:20:78:c9:8e:ed:9d:
5d:21:71:10:7b:f3:36:4c:65:25:76:f8:a9:61:9a:
71:6d:54:ca:e7:58:e5:37:b6:16:10:02:b3:59:f2:
62:bf:6e:30:0d:70:28:a4:64:d2:f5:bb:f5:88:36:
04:cd:96:b4:ea:40:61:5a:f1:34:21:7e:0a:6e:19:
e8:f2:7e:76:9a:e1:52:50:73:41:24:dc:2b:b1:ff:
0f:8d:3c:a4:88:53:32:3e:fd:0c:e0:7d:a6:92:ff:
f9:59:67:67:df:40:66:a9:2d:e9:b9:cc:e5:d8:9c:
5c:db:25:df:eb:76:ca:62:f3:5d:f2:f2:f1:df:30:
14:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:1B:10:EB:50:66:08:DC:23:AC:9A:1F:A6:C3:AD:25:43:97:CC:62
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/GRsQ61BmCNwjrJofpsOtJUOXzGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.201.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:27:6f:2b:8f:30:3b:ba:b0:be:5c:0a:7f:86:a2:42:b6:6c:
95:1b:7a:0a:cb:af:0e:1c:99:a0:72:39:43:3c:2f:30:e7:02:
27:dc:67:6e:24:25:2d:a4:5b:1e:b9:b8:39:c9:cd:28:6a:29:
b8:b3:18:b1:6f:a3:64:32:e8:0d:65:b2:ac:44:5e:2b:a1:7f:
3f:47:cd:64:ae:15:71:54:fa:26:06:d1:7f:42:26:be:10:f8:
5e:5c:b0:09:c4:d1:3f:fb:fc:1b:b2:91:81:e7:03:83:90:8a:
8b:80:1c:eb:e1:2b:b0:cf:56:2e:41:69:a7:44:fd:8d:d9:04:
f1:65:de:84:dc:02:f8:ee:81:e3:92:a5:d0:67:e9:27:84:d4:
60:e9:30:1b:0f:76:f8:4a:83:84:61:41:7b:82:ad:f7:74:04:
0f:59:f0:15:a2:dc:d1:a1:d3:55:2d:6e:5d:b4:75:0b:ca:10:
56:e4:70:8f:1b:72:7a:f9:21:dd:79:18:f5:9d:57:8b:15:53:
5b:0e:bd:83:6b:08:98:ae:7d:a8:92:2a:39:ae:15:14:4d:69:
6e:eb:60:cf:ae:0c:72:69:1e:fc:bd:de:c8:00:c8:d4:26:23:
96:7c:5e:9e:ba:b1:cb:24:75:25:12:f3:c4:ea:ab:55:b6:44:
a9:8e:40:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:49 2024 by rpki-client on console-ams.rpki-client.org